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ABSTRACT 



A programmable system for checking for protocol er- 
rors in a conoununication system includes a matrix for 
generating error checking signals selected by data fields 
utilized to implement a communication. If the configu- 
ration or protocol is changed the system facilitates re- 
programming to compensate for the change. 
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selected mask/configuration signal has the masking 
PROGRAMMABLE ERROR-CHECKING MATRIX value. 

FOR DIGITAL COMMUNICATION SYSTEM According to another aspect of the invention, the 

error checking system is included in every module of a 
FIELD OF THE INVENTION 5 communication system to provide for fault-tolerance to 

The present invention relates generaUy to error checldng of the communication channel for er- 

checking systems and more particularly relates to pro- , , , , , .„ i. 

T.1 t. 1 • * A X- ^ • ^ i5 1 Further features and advantages will become annar- 
grammably checkmg the mtersection matrix of multiple . . . , , . u^jvwmc oi^po* 

^J!a c ij • J- 1 * *f ent m view of the appended drawings and following 

control and identifler fields m digital communicatian jq detailed descriotion ^ ^ 

systems. ^ 



DESCRIPTION OF THE RELEVANT ART 



BRIEF DESCRIPTION OF DRAWINGS 



^ „ ^. . , . FIG. 1 depicts a shared bus communication system 

An digit^ communication systems require a set of including a CPU 10 having several modules that com- 
rules, caLed a protocol, to control commumcations 15 municate via a shared bus (IBU^ 12. 
between different modules in the system. It is wcU piG. 2 depkts the arbitration, command, and data 
known to implement error checking systems to assure phases of a basic IBUS operation, 
that a particular communication does not violate the piG. 3 is a block diagram of an embodiment of the 
protocol. present invention which supports Ml programmability 

In many systems a communication includes a hand- 20 of the error condition to be checked, 
shaking operation to establish a link between two mod- FIG. 4 is a block diagram of the second preferred 
ules. Various data fields are transferred during various embodiment of the invention. 

phases of an operation that allow the modules to gain FIG. 5 depicts a fully programmable error checking 
control of a communication channel, identify each matrix. 

other and the type of operation to be performed, to 25 FIG. 6 depicts a matrix decoder having colunms 
verify the readiness of each module to perform the identified by different transfer length values and rows 
operation, and to transfer data over the communication identified by different bus commands, 
channel The protocol specifies the values of data fields FIG. 7 depicts a COMMAND/HANDSHAKE hard 
that may be generated during each of these phases. wired error checking matrix. 

One of the advantages of digited systems is the ability 30 oESCRIPnON OF THE PREFERRED 
to reconfigure the hardware by addmg or deleting mod- EMBODIMENTS 
ules or functions and to change the protocol to change 

the field values utilized during the different phases. Th« present invention is an error checking system 
However, existing error checking fiinction are gener- general utility in many types of digital communi- 

ally not reconfigurable thereby limiting their utility in caXio^ systems. Many of the features of the system can 
digital communication systems. ^^^^ appreciated when described in the context of a 

particular bus system. In the following detailed descrip- 
SUMMARY OF THE INVENTION tion the error checking system will be described with 

The present invention is a reconfigurable error rrference to a bus subsystem utUized in 
checking system for use in digital communication sys- ^ ^^^^t^^ed by Tandem Computers, Inc. TTie bus subsys- 
tems. The error checking system utilizes the values of f ^ • ^ only m sufficient detail to support 
an error checking function to check whether the data descnption of the mvention. 
fields generated during a particular communication are . ™; * ^^^J^ '^fnu"^^ commumcation system 
allow^ or forbidden by a communication protocol. ^.tS^tf vV. 

— . . - . t , . j*r • *v 45 communicate via a shared bus QBUS) 12, These mod- 

? reconfigured by modifying the error include a processor interface cUp (PIC) 14. amain- 

c ccKmg luncuon. _^ - . ^ tenance diagnostic chip (MDC) 16, a memory mterface 

According to one aspect of the mvention. error ^ 18. and two bus interface moduli aPB_X 

checkmg signals are programmably stored and selected and ffB—Y) 20 and 22 

by particular combinations of fields generated during a 5^ jhe IBUS 12 is synchronous parallel data path over 
communicadon operation. Tte value of the selected ^^1^^ independent modules may transfer address and 
error checkmg signal mdicates whether the values of ^ata mformation in a structured environment. The bus 
the particular combmation of fields is allowed by the operations are synchronous with a basic system clock, 
protocol. r . . t. All events on the IBUS occur relative to the rising edge 

Accordmg to another aspect of the mvention, the 55 of the clock. Two basic operations over the bus are 
error checking signals are generated by a hard-wired defined; Arbitration and Transfer, each capable of oc- 
matrix decoder. The particular error signal generated is curring simultaneously. 

selected by a particular combmations of fields generated xhc Arbitration operation allows one of the modules 
during a communication operation. If the error signal to become a master to gain sole ownership of the IBUS. 
has a predetermined value then the particular combina- 60 Modules desiring to gain ownership of the IBUS (Re- 
tion of fields is forbidden by the protocol. Row and questor modules) must arbitrate and gain ownership of 
column mask registers programmably store error mask- the IBUS before attempting to transfer informatioiL 
/configuration signals, having either a masking or non- The Transfer operation allows a Requestor that has 
masking value, which are selected by the fields included gained ownership of the IBUS to send data to or receive 
in the particular combination. The selected error signal 65 data from a Responder module and includes Command 
and error mask/configuration signals are provided to a and Data Phases. During the Command Phase, the 
logic circuit which changes the value of the selected Requestor, after arbitrating and gaining ownership of 
error signal if its value is the predetermined value and a the IBUS, places and address of a selected module on 



02/10/2004, EAST Version: 1.4.1 



5,396,505 

3 4 

the Address/Data lines and a command on the Hand- having 2'»2'" bit positions. The order of the bits will be 
shake lines. During the Data Phase, data is transferred determined by the particular scan path established in the 
between the Requestor and Responder. The length of matrix. After the scan pattern is read into the matrix 
the transfer is determined by the Requestor during the through the scan data in input each value of F(M,N) 
Command Phase and can range firom a single byte to 5 will be stored at the particular storage location selected 
many words. by the received pair of M and N fields. If the system is 

FIG. 2 depicts the arbitration, command, and data reconfigured or protocol is changed a different scan 
phases of a basic IBUS operation. Requestors X and Y pattern is read into the matrix to reconfigure the error 
assert their Arb lines to request ownership of the IBUS checking system. 

and SC (system control) is asserted at CYCLE 1 grant- 10 FIG. 4 is a block diagram of a second preferred em- 
ing ownership to the bus to Requestor X (which in this bodiment of the invention which reduces the number of 
example has higher priority than Requestor Y). During storage elements required in the first embodiment and in 
the Command Phase, Requestor X drives the high and many apphcations reduces the gate count 
low addresses of the selected Responder on the Ad- In FIG. 4, a matrix decoder logic 40 block receives 
dress/Data lines during CYCLE 1 and CYCLE 2 and IS pairs of M and N signals at its row and column Inputs 
drives the command (CMD) on the Handshake lines and provides an unmasked error checking signal at its 
during CYCLE 1 and the length of the data transfer output selected by the received pair of M and N signals. 
(LENGTH) on the Handshake lines during CYCLE 2. Scannable row and column registers 42 and 44 have a 
During the Data Phase, data is transferred between the scan data in input and a scan_data_out output. The 
Requestor and Responder on the Address/Data lines 20 scannable row and column registers store "error mask- 
durihg CYCLES 3 and 4. Also, during the Data Phase, /configuration bits" which are selectable by particular 
the Responder handshakes on the handshake lines with row inputs, colimm inputs, or row/column cross-sec- 
READYODD for the first word in a transfer and REA- tion inputs, 

DYEVEN for all subsequent words in a transfer. The selection of the error mask/configuration bits is 

FIG. 3 is block diagram of an embodiment of the 25 performed by an error tree 46 implemented in hard- 
present invention which supports full programmability ware. The hardware includes a masking AND gate 48 
of the error conditions to be checked. As described for receiving the selected error mask/configuration bits 
above, a bus operation requires the transfer of several as gating inputs and the selected unmasked error check- 
data fields wMch represent information required to ing signal as the signal input and provides a maskable 
implement a data transfer. The bus transfer protocol 30 error checking signal at its output. The outputs of the 
establishes whether particular values of a pair of fields, masking AND gates are coupled to the input of an OR 
M and N, are allowed. For example, the M and N fields gate 50 having its output coupled to the input of a tim- 
may respectively identify a requestor module and re- ing AND gate 52. The other input of the timing AND 
sponder module. In this case the error checker would be gate 52 receives a timing window signal (optional) and 
programmed to output a true value if a communication 35 its output is a timed error checking signal, 
between the particular modules identified by the M and The operation of the embodiment depicted in FIG. 4 
N values were not allowed by the protocol. will now be described. The predetermined error check- 

Thus, the embodiment of FIG. 3 implements the ing function for a particular protocol is hardwired into 
error checking function: the gate array of the matrix decoder logic block. If the 

F(M,N)=Tonly when the values encoded by M and 40 selected row and column error checking bits are all 
N are not allowed and F otherwise. TRUE then the masking AND gate 48 is open and 

r If M is an m-bit data field and N is an n-bit data field maskable error checking signal is equal to the unmasked 
J then the data fields may encode up to 2*" and 2" values error checking signal, 
respectively. The symbols M and N in the above equa- Although the error function is hardwired into the 
I ^tion represent pairings of the values of a particular pair 45 matrix decoder logic, the scannable configuration regis- 
M and N fields. Thus, if the values encoded by a ters 42 and 48 allow the error checking bit for particular 
particular pair of M and N fields are forbidden by the received row inputs, column mputs, or row/column 
protocol then the value of the function value is true (T) intersection inputs to be programmably changed from 
and if the values are not forbidden the function value is TRUE to FALSE. As is apparent from FIG. 4, if either 
false (F). 50 the row or column configuration bit for a given M or N 

Turning to FIG. 3, a fitlly programmable check ma- field is FALSE then the output of the corresponding 
trix 30 is implemented in a gate array. The matrix is masking AND gate is always FALSE. Accordingly, a 
formed by scannable registers and has scao-data-in TRUE unmasked error bit may be programmably 
input and a scan— data_output The fields being changed to FALSE. The converse is not possible how- 
checked, M and N, have widths m and n respectively. 55 ever, that is, a FALSE unmasked error bit cannot be 
Accordingly, the matrix has 2" colmnns and 2*" rows. programmably changed to TRUE. Thus, a particular 
The M and N fields generated on the bus are latched row input, column input, or row/column intersection 
at the appropriate time by M and N latches 32 and 34 input that was previously forbidden can allowed in the 
and are applied, respectively, to a row MUX 35 and a new protocol so specifies by reprogramming the corre- 
column MUX 36 for selecting a unique row and column 60 spending masking/configuration bits to the masking 
corresponding to the appUed fields. The selected output state. 

is applied to one input of an output AND gate 38 and a One of the embodiments depicted in FIGS. 3 and 4 
timing window signal (optional) is applied to the other may be more suitable for a particular application. HGS. 
input to provide a clocked error signal. 5-7 are diagrams depicting specific applications of the 

The operation of the embodiment depicted in FIG. 3 65 preferred embodiments, 
will now be described- The F(M,N) values correspond- The fully programmable embodiment of FIG. 3 may 
ing to a selected hardware configuration and bus trans- be better suited to an application having a great deal of 
fer protocol are selected and arranged in a scan pattern flexibility and reconfigurability. For example, the al- 
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iowable and forbidden responder/requestor pairs may 
be changed and the fully programmable embodiment 
may be more suitable.. 

FIG. 5 depicts a fully programmable error checking 
matrix. In this configuration the responder ID data field S 
values and requestor ID data field values for a particu- 
lar bus transaction are utilized as the column and row 
identifiers. These IDs are generated on the bus during 
CYCLE 2 (FIG. 2) of the bus transfer. A zero value at 
the intersection of a particular requestor/responder pair 10 
designates that the pair is allowed by the bus protocol. 
If the protocol were changed the intersection values 
would be receded via scan. Note also that if another 
module were connected, e.g., an asynchronous transfer 
module, one of the unused rows and columns could be IS 
designated for this module and modified error checking 
signals stored in the designated row or colunm. 

The mask programmable embodiment of FIG. 4 may 
be better suited to an application having a small degree 
of flexibility. For example, for a particular protocol 20 
cerfain data types of data transfer operations may be 
allowable for a small set of data transfer lengths. For 
another protocol the number of data transfer lengths 
allowable for some types of data transfers may be 
changed. These changes can be implemented by repro- 23 
gramming the configuration bits in the mask registers. 
FIG. 6 depicts a matrix decoder having columns identi- 
fied by different transfer length values and rows identi- 
fied by different bus commands. The diagram includes a 
l*^mapping pairing the actual field values, i.e., O through 30 
F, to the symbolic command and word length parame- 
ters. For example, a command field value equal to "6" 
symbolizes a Block Write command and a transfer 
length field value equal to "6" symbolizes a 7 word 
transfer length. The "pre" or '*protocol error" areas of 35 
the matrix are hardwired to TRUE values and "ok" 
areas are hardwired to FALSE values. 

Referring back to FIG. 2, the CMD and LENGTH 
handshakes are generated on the handshake line in suc- 
cessive clock cycles. The command field is latched and 40 
provided to the error checking decoder when the 
length field is generated. The advantage of the hard- 
wired embodiment to reduce gate count is now appar- 
ent. Note that for row inputs 8 through F transfers for 
less than one word are defined by the command field 4S 
Accordingly, a protocol error is defined for the rowA 
column intersection of rows 8 through F and columns 1 
through F because columns i through F are for transfer 
lengths of greater than one word. Thus, a simple gate 
configuration generates the error checking signal for 50 
120 possible row/column intersections. 

The versatihty of the masking function is also demon- 
strated. For example, in the matrix of FIG. 6 the row 
inputs 2, 4, and 5 are undefined commands that produce 
unmasked error checking signals when received. How- 55 
ever, if the row input 4 were later defined as a command 
that transferred 1 to 8 words, then unmasked error 
checking signal would be masked if the UC4L mask bit 
were reset so that no error signal would be generated 
for a command field equal to 4. Additionally, if it were 60 
desired to remove the length error checking function 
from the system the L mask bit would be reset 

FIG. 7 depicts a COMMAND/HANDSHAKE 
hard-wired error checking matrix. Note from FIGS. 6 
and 7 that if the protocol error mask bit (P) is reset then 65 
both the CMD/LENGra and CMD/HANDSHAKE 
error checking functions are masked. Thus, the error 
tree includes a masking gate for masking the unmasked 



error checking signals generated by both hard-wired 
decoders. Further, from FIG. 7, if any of the handshake 
signals 1-6 are later defined, the unmasked error check- 
ing signal can be masked by a respective one of the 
masking bits UHS1-UHS6. Additionally, the handshake 
error checker matrix can be masked by resetting the HS 
masking bit. 

Referring back to FIG. 1, in the preferred embodi- 
ment the error checking matrices are redundantly in- 
cluded on each module and the error checking signals 
are received and processed by the MDC 16. This redun- 
dancy provides for fault-tolerant operation in the event 
of the failure of a particular error checking matrix. 
Additionally, electrical problems with the bus can be 
detected if Uie results of checking on the different mod- 
ules are inconsistent. 

The invention has now been described in detail with 
reference to the preferred embodiment. Alternatives 
and substitution be apparent to persons of ordinary 
skill in the art For example, although the invention has 
been defined with reference to a shared bus conmiunica- 
tion system, it is equally applicable to digital communi- 
cation system utilizing other communication channels 
such as telephone Une, optical fiber, microwave, or 
radio-frequency links. Additionally, the checking matri- 
ces in the preferred embodiment are implemented in 
gate arrays, but any suitable storage medium such as 
RAM, ROM, or general purpose registers can be uti- 
lized. The intersection of two fields has been described 
but error checking based on more than two fields can 
also be implemented. Accordingly, it is not intended to 
limit the invention except as provided in the claims. 

What is claimed is: 

1. In a system having a plurality of modules coupled 
by a communication chaimel and having a communica- 
tion protocol utilizing first and second data fields, said 
first data field encoding one of a plurality of M values, 
M being an integer and said second data field encoding 
one of a plurality of N values, N being an integer, with 
said first and second data fields transmitted in succes- 
sion on the channel to define and control communica- 
tion operations, a method for checking for protocol 
errors comprising the steps of: 
writing an error checking signal to a unique storage 
location in a group of NX M storage locations for 
each one of a set of the M X N possible pairs to said 
first and second data field values where said group 
of storage locations is divided into M first data field 
sets of storage locations, each first data field set 
including N storage locations with each storage 
location included in only one first data field set, 
with each written error checking signal having 
either a first check value indicating that the possi- 
ble pair is allowed by the communication protocol 
or having a second check value indicating that the 
possible pair is forbidden by the communication 
protocol; 

receiving a given pair of said first and second data 
fields transmitted on said channel during a particu- 
lar communication operation; 

decoding a received first data field to obtain a first 
data field value; 

utilizing only said first data field value to select a 
unique one of first data field sets; 

decoding a received second data field to obtain a 
second data field value; 

utilizing only said received second data field value to 
select a unique one of the N storage locations in the 
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unique first data field set selected by said received 
first data field to provide a selected error checking 
signal selected only by said first and second re- 
ceived data fields; and 
aborting the particular communication operation if 5 
the selected error checking signal indicates that the 
received first and second data fields are not al- 
lowed by the communication protocol. 

2. The method of claim 1 further comprising the step 
of: 10 

rewriting said selected error checking signal if the 
protocol is modified. 

3. In a digital system including multiple modules 
coupled by a communication channel and that performs 
operations specified by first and second data fields 15 
transmitted on the channel to govern inter-module com- 
munication and operations, an error checking system, 
responsive to selected data fields, for indicating 
whether operations specified by the selected fields are 
allowed according to a particular hardware configura- 20 
tion and communication protocol, said error checking 
system comprismg; 

fint non-programmable matrix decoder, having 
row and colunm inputs for receiving first and sec- 
ond fields respectively and an output for transmit- 25 
ting an unmasked error checking signal selected by 
said first and second fields received at said inputs> 
with said error checking signal having cither a first 
check value if the first and second fields are not 
allowed by the particular hardware configuration 30 
and communication protocol or a second check-^ 
value if the first and second data fields are allowed; 
means for providing selected first and second data 
fields to respective row and column inputs of said 
matrix decoder to select an unmasked error check- 35 
ing signal; 

a programmable row mask register for storing a set of 
row configuration bits, each bit programmably set 
to either a masking state or non-masking state; and 

mask logic means, coupled to the output of said ma- 40 
trix decoder and coupled to said row mask register 
to receive the unmasked error checking value, and 
a row configuration bit selected by said first data 
field received at the row input of said matrix de- 
coder, for providing an unmasked error signal hav- 45 
ing said second check value regardless of the value 
of said unmasked error signal output by said matrix 
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decoder if the row configuration bit selected is set 
to the masking state and for providing an unmasked 
error signal having a value equal to the check value 
of said unmasked error signal output by said matrix 
if the row configuration bit selected is set to the 
unmasking state so that a pair of first and second 
fields previously forbidden can be allowed by re- 
programming a row configuration bit. 

4. The error checking system of claim 3 wherein said 
first matrix decoder comprises: 

a hard-wired logic circuit for generating one un- 
masked error checking signal for any pair of first 
and second data fields having a first data field in- 
cluded in a plurality of selected first data fields and 
a second data field included in a plurality of se- 
lected second data fields. 

5. The error checking system of claim 3 further com- 
prising: 

a second matrix decoder, having row and column 
inputs for receiving said first-data field and a third 
data field respectively and an output for transmit- 
ting an unmasked error checking signal selected by 
said first and third fields received at said inputs, 
with said error checking signal having either said 
first check value if the first and third fields are not 
allowed by the particular hardware configuration 
and communication protocol said second check 
value if said first and third data fields are allowed; 
and further comprising: 

an error tree coupled to said second matrix decoder 
and said row mask register for providing an error 
signal having said first value regardless of the value 
of an unmasked error signal selected by the first 
and third data fields if the row configuration bit 
selected by the first data field is in the masked state. 

6. The error checking system of claim 3 wherein: 

a single error signal is accessed by each first data field 
in a set of different first data fields to reduce the 
size and complexity of said matrix decoder. 

7. The error checking system of claim 6 wherein: 
said row mask register has a single storage location 

for storing a first row configuration bit selected by 
each furst data field included in said set of different 
first data fields to reduce the size and complexity of 
said row mask register. 
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